WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
brands-for-woocommerce
Published
2023-05-10
Title
Brands for WooCommerce < 3.8.2 - Contributor+ Stored XSS
Slug
brands-for-woocommerce
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Missing Authorization to Unauthenticated Order Manipulation and Information Retrieval
Slug
brands-for-woocommerce
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Cross-Site Request Forgery
Slug
brands-for-woocommerce
Published
2025-12-26
Title
Brands for WooCommerce < 3.8.6.4 - Authenticated (Contributor+) SQL Injection
Slug
brave-popup-builder
Published
2023-12-27
Title
Brave Popup Builder < 0.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
brave-popup-builder
Published
2024-03-28
Title
Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery
Slug
brave-popup-builder
Published
2024-06-03
Title
Brave < 0.7.0 - Admin+ Stored XSS
Slug
brave-popup-builder
Published
2024-08-16
Title
Brave Popup Builder < 0.7.1 - Cross-Site Request Forgery
Slug
brave-popup-builder
Published
2025-12-23
Title
Brave < 0.8.4 - Missing Authorization
Slug
bravepopup-pro
Published
2025-08-01
Title
Brave Conversion Engine (PRO) < 0.8.0 - Authentication Bypass
Slug
bravis-addons
Published
2026-02-11
Title
Bravis Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bravis-user
Published
2025-08-22
Title
Bravis User <= 1.0.0 - Authentication Bypass to Account Takeover
Slug
bravo-search-and-replace
Published
2025-02-24
Title
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection
Slug
bravo-translate
Published
2023-11-28
Title
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
Slug
bread-butter
Published
2024-11-08
Title
Bread & Butter < 7.5.880 - Contributor+ Stored XSS
Slug
bread-butter
Published
2025-12-04
Title
Bread & Butter < 8.0.1398 - Arbitrary File Upload via CSRF
Slug
breadcrumb
Published
2023-01-11
Title
Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode
Slug
breadcrumb-navxt
Published
2018-09-28
Title
Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API
Slug
breadcrumb-navxt
Published
2026-02-18
Title
Breadcrumb NavXT < 7.5.1 - Sensitive Information Exposure
Slug
breadcrumb-simple
Published
2023-08-30
Title
breadcrumb simple <= 1.3 - Admin+ Stored XSS
Slug
breadcrumbs-by-menu
Published
2019-06-08
Title
Breadcrumbs by menu < 1.0.3 - Multiple Issues
Slug
breadcrumbs-shortcode
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
breakdance
Published
2024-05-03
Title
Breakdance < 1.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
Slug
breakdance
Published
2024-05-08
Title
Breakdance < 1.7.2 - Authenticated (Contributor+) Remote Code Execution
Slug
breakdance
Published
2024-07-31
Title
Breakdance < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting